Technical Documentation: Acubiz SSO (Single Sign-On)

This document describes the framework, prerequisites, and configuration for establishing Single Sign-On (SSO) in Acubiz.

System Architecture and Compatibility

Acubiz SSO is based on ADFS and SAML 2.0. The solution is compatible with all Identity Provider platforms (IdP) that support the SAML 2.0 standard (including Microsoft Entra ID, Okta, Ping Identity, etc.). For a complete list of supported services, please refer to SAML-based products and services.

Important Prerequisites and Terms

• For Access Verification Only: The SSO integration in Acubiz is used exclusively for authentication (login). There is no automatic synchronization of user master data (provisioning) between the company’s IdP (e.g., Entra ID) and Acubiz.

• User Creation: All users must be created specifically in Acubiz. This can be managed either through a separate integration solution or manually via Acubiz’s administration interface.

• Identical Email Addresses: The user’s email address must be sent as a claim/name in the SAML token, and this value must be 100% identical to the email address registered for the user in Acubiz. It is up to the customer to determine which source field the email is mapped from (e.g., UPN or Mail field). For further guidance, see Microsoft’s documentation on SAML claims.

• External Access: ALL active Acubiz users – including external consultants or partners – must be created in the customer’s IdP to access the system. It is recommended to manage this via a dynamic “All Users” group in your IdP.

⚠️ Note Regarding Activation: Activating SSO in Acubiz replaces the traditional login method (username/password) for all users. After activation, login will only be possible via the company’s SSO.

Environments and Support

• Environments: The SSO setup is implemented by default in Acubiz’s production environment. If SSO setup is desired in a dedicated test environment, this will incur an additional cost beyond the standard price for the production environment.

• Guides and Support: Acubiz provides specific configuration guides for Microsoft Entra ID and AD FS. Unfortunately, we do not offer technical support or specific guides for third-party platforms beyond these.